// SCAN REPORT

NowAIKit — ServiceNow AI Toolkit

446 tools. 175 can modify or destroy data without limits.

7 destructive tools with no built-in limits. Policy required.

Last updated: 6 Jun 2026

175 can modify or destroy data

271 read-only

446 tools total

Free to start. No card required.

TOOL MAP

Read (271) Write / Execute (168) Destructive / Financial (7)

WHAT CAN GO WRONG

Destructive tools (cmdb_reconcile, delete_attachment, delete_record) permanently delete resources. There is no undo. An agent calling these in a retry loop causes irreversible damage.

Write operations (add_comment, add_user_to_group, add_work_note) modify state. Without rate limits, an agent can make hundreds of changes in seconds — faster than any human can review or revert.

Execute tools (batch_request, deploy-updateset, execute_background_script) trigger processes with side effects. Builds, notifications, workflows — all fired without throttling.

RECOMMENDED RULES

Deny destructive operations

{
  "cmdb_reconcile": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "add_comment": {
    "limits": [
      {
        "counter": "add_comment_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "action": {
    "limits": [
      {
        "counter": "action_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

ALL 446 NOWAIKIT — SERVICENOW AI TOOLKIT TOOLS

DESTRUCTIVE 7 tools

Destructive cmdb_reconcile Destructive delete_attachment Destructive delete_record Destructive delete_system_property Destructive delete_uib_page Destructive http_methods Destructive remove_user_from_group

WRITE 146 tools

Write add_comment Write add_user_to_group Write add_work_note Write approve_request Write artifact_type Write bulk_set_properties Write close_change_request Write close_csm_case Write close_hr_case Write close_incident Write commit_changeset Write complete_task Write complete_update_set Write component_type Write configure_offline_sync Write configure_workspace_list Write create_acl Write create_agentic_workflow Write create_ai_agent Write create_approval_rule Write create_asset Write create_business_rule Write create_catalog_item Write create_catalog_ui_policy Write create_catalog_variable Write create_change_request Write create_ci_relationship Write create_client_script Write create_csm_case Write create_dashboard Write create_devops_change Write create_epic Write create_flow Write create_flow_action Write create_grc_risk Write create_group Write create_hr_case Write create_hr_task Write create_import_set_row Write create_incident Write create_knowledge_article Write create_kpi Write create_mobile_app_config Write create_mobile_applet Write create_mobile_layout Write create_notification Write create_now_assist_skill Write create_offboarding_case Write create_onboarding_case Write create_playbook Write create_portal Write create_portal_page Write create_portal_widget Write create_problem Write create_record Write create_report Write create_rest_message Write create_scheduled_job Write create_scheduled_report Write create_scoped_app Write create_script_include Write create_scrum_task Write create_security_incident Write create_solution_package Write create_story Write create_subflow Write create_ui_action Write create_ui_policy Write create_uib_component Write create_uib_data_broker Write create_uib_page Write create_update_set Write create_user Write create_ux_app_route Write create_ux_experience Write create_va_topic Write create_workspace Write create-incident Write ensure_active_update_set Write export_properties Write export_report_data Write export_update_set Write fulfillment_type Write generate_report Write generate_summary Write generate_work_notes Write import_cmdb_data Write import_properties Write natural_language_update Write preview_update_set Write publish_changeset Write publish_flow Write publish_knowledge_article Write register_event Write reject_request Write resolve_incident Write resolve_problem Write retire_asset Write retire_knowledge_article Write rollback_deployment Write schedule_cab_meeting Write schedule_notification Write send_emergency_broadcast Write send_push_notification Write set_system_property Write submit_change_for_approval Write switch_instance Write switch_update_set Write switch-instance Write track_deployment Write type Write update_acl Write update_asset Write update_business_rule Write update_catalog_item Write update_change_request Write update_client_script Write update_csm_case Write update_dashboard Write update_epic Write update_group Write update_hr_case Write update_hr_profile Write update_incident Write update_knowledge_article Write update_notification Write update_portal_widget Write update_problem Write update_record Write update_report Write update_scheduled_job Write update_scoped_app Write update_script_include Write update_scrum_task Write update_security_incident Write update_story Write update_task Write update_ui_action Write update_uib_component Write update_uib_page Write update_user Write update_va_topic Write update_vulnerability Write updateset Write updateset_name Write upload_attachment

READ 271 tools

Read action Read ai_search Read analyze_data_quality Read api_name Read app Read app_name Read artifact Read bulk_get_properties Read categorize_incident Read category Read change Read check_table_completeness Read ci_class Read ci_name Read ci-health Read clone_artifact Read cmdb_find_duplicates Read cmdb_find_orphans Read cmdb_find_stale Read cmdb_health_dashboard Read cmdb_impact_analysis Read compare_record_counts Read coverage Read description Read DevOps Read discover_table Read field Read find_artifact Read fire_event Read fluent_init Read fluent_query Read fluent_validate Read focus Read get_acl Read get_ai_agent Read get_asset Read get_atf_failure_insight Read get_atf_suite Read get_atf_suite_result Read get_atf_test Read get_attachment_metadata Read get_business_rule Read get_catalog_item Read get_change_request Read get_changeset Read get_client_script Read get_cmdb_ci Read get_compliance_assessment Read get_csm_account Read get_csm_case Read get_csm_case_sla Read get_csm_contact Read get_current_instance Read get_current_update_set Read get_deployment Read get_devops_insights Read get_devops_pipeline Read get_email_log Read get_event_registry_entry Read get_flow Read get_flow_error_log Read get_flow_execution Read get_grc_risk Read get_group Read get_hr_case Read get_hr_case_activity Read get_hr_lifecycle_events Read get_hr_profile Read get_hr_service Read get_import_set Read get_incident Read get_knowledge_article Read get_license_compliance Read get_license_optimization Read get_mobile_analytics Read get_mobile_app_config Read get_ms_copilot_topics Read get_my_approvals Read get_notification Read get_now_assist_skill Read get_pa_dashboard Read get_pa_indicator Read get_pa_job Read get_pa_scorecard Read get_pa_time_series Read get_performance_analytics Read get_pi_models Read get_portal Read get_portal_page Read get_portal_theme Read get_portal_widget Read get_problem Read get_process_automation Read get_property_history Read get_record Read get_report Read get_rest_message Read get_scheduled_job Read get_scoped_app Read get_script_include Read get_security_dashboard Read get_security_incident Read get_sla_details Read get_subflow Read get_sys_log Read get_system_property Read get_table_record_count Read get_table_schema Read get_task Read get_threat_intelligence Read get_transform_map Read get_ui_action Read get_ui_policy Read get_uib_page Read get_user Read get_ux_app Read get_va_conversation Read get_va_topic Read get_virtual_agent_topics Read get_vulnerability Read get_workspace Read incident Read instance Read item_name Read knowledge-search Read list_acls Read list_action_instances Read list_active_events Read list_active_slas Read list_ai_agents Read list_approvals Read list_asset_contracts Read list_assets Read list_atf_suites Read list_atf_test_results Read list_atf_tests Read list_attachments Read list_audit_results Read list_business_rules Read list_catalog_items Read list_change_requests Read list_changesets Read list_client_scripts Read list_compliance_policies Read list_credential_aliases Read list_csm_accounts Read list_csm_cases Read list_csm_contacts Read list_csm_products Read list_data_sources Read list_deployment_history Read list_deployments Read list_devops_pipelines Read list_discovery_schedules Read list_email_logs Read list_email_templates Read list_epics Read list_event_log Read list_event_registry Read list_flow_executions Read list_flows Read list_grc_controls Read list_grc_risks Read list_groups Read list_homepages Read list_hr_cases Read list_hr_document_templates Read list_hr_services Read list_hr_tasks Read list_import_sets Read list_instances Read list_job_run_history Read list_knowledge_bases Read list_mid_servers Read list_mobile_app_configs Read list_mobile_applets Read list_mobile_layouts Read list_my_tasks Read list_notification_subscriptions Read list_notifications Read list_now_assist_skills Read list_oauth_applications Read list_pa_breakdowns Read list_pa_dashboards Read list_pa_indicators Read list_pa_jobs Read list_playbooks Read list_portal_pages Read list_portal_themes Read list_portal_widgets Read list_portals Read list_process_automations Read list_property_categories Read list_relationships Read list_reports Read list_rest_message_functions Read list_rest_messages Read list_scheduled_jobs Read list_scoped_apps Read list_script_includes Read list_scrum_tasks Read list_security_incidents Read list_security_playbooks Read list_software_licenses Read list_stories Read list_subflows Read list_system_properties Read list_transform_field_maps Read list_transform_maps Read list_ui_actions Read list_ui_policies Read list_uib_components Read list_uib_data_brokers Read list_uib_pages Read list_update_sets Read list_users Read list_ux_apps Read list_ux_pages Read list_va_categories Read list_va_conversations Read list_va_topics_full Read list_vulnerabilities Read list_widget_instances Read list_workspaces Read ml_auto_categorize Read ml_detect_anomalies Read ml_evaluate_model Read ml_forecast_incidents Read ml_predict_change_risk Read ml_process_optimization Read ml_similar_incidents Read ml_virtual_agent_nlu Read morning-standup Read my-changes Read my-tickets Read name Read natural_language_search Read nlq_query Read NowAIKit Read order_catalog_item Read p1-alerts Read query_records Read scan_vulnerabilities Read scope Read scope_prefix Read script Read search_catalog Read search_cmdb_ci Read search_knowledge Read search_system_properties Read service Read service_mapping_summary Read severity Read sla-breaches Read suggest_resolution Read suite_name Read table Read target Read target_release Read test_flow Read test_now_assist_skill Read topic Read track_asset_lifecycle Read trend_query Read urgency Read validate_artifact Read validate_deployment Read validate_property Read version Read when Read widget_name

FAQ

Can an AI agent delete data through the NowAIKit — ServiceNow AI Toolkit MCP server? +

Yes. The NowAIKit — ServiceNow AI Toolkit server exposes 7 destructive tools including cmdb_reconcile, delete_attachment, delete_record. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through NowAIKit — ServiceNow AI Toolkit? +

The NowAIKit — ServiceNow AI Toolkit server has 146 write tools including add_comment, add_user_to_group, add_work_note. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach NowAIKit — ServiceNow AI Toolkit.

How many tools does the NowAIKit — ServiceNow AI Toolkit MCP server expose? +

446 tools across 4 categories: Destructive, Execute, Read, Write. 271 are read-only. 175 can modify, create, or delete data.

How do I enforce a policy on NowAIKit — ServiceNow AI Toolkit? +

Register the NowAIKit — ServiceNow AI Toolkit MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

// RELATED SERVERS

Other MCP servers with similar tools.

Starter policies for each. Same risk classification, live on your fleet in minutes.

Enforce policy on every NowAIKit — ServiceNow AI Toolkit tool call.

Deterministic rules across all 446 NowAIKit — ServiceNow AI Toolkit tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

SECURE NOWAIKIT — SERVICENOW AI TOOLKIT →

Free to start. No card required.

4,600+ MCP servers and 31,000+ tools scanned and risk-classified.

NowAIKit — ServiceNow AI Toolkit

// TOOL MAP

// WHAT CAN GO WRONG

// RECOMMENDED RULES

// ALL 446 NOWAIKIT — SERVICENOW AI TOOLKIT TOOLS

// FAQ